AWARE Power-Drain DoS Attack Detection in Wireless Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless networks are vulnerable to denial-of-service (DoS) attacks due to limited bandwidth, processing capacity, and power supply constraints, making them susceptible to power-drain attacks that are difficult to detect and defend against, especially with low-volume data triggers that keep mobile devices active, leading to rapid battery drain.
Innovation Solution
The Architecture for Wireless Attack REsistance (AWARE) system, which includes a profiler, detector, and protector, uses energy efficiency ratios to identify abnormal power consumption patterns and employs dynamic filtering to counteract such attacks by blacklisting malicious traffic, potentially collocated with firewalls or distributed within the wireless infrastructure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If wireless networks operate with limited bandwidth and processing capacity, then network performance is maintained under normal conditions, but the network becomes vulnerable to DoS attacks that can easily overload the system
Solution Approach 1:
The system performs preliminary actions by establishing baseline power consumption profiles for mobile devices under normal operating conditions before attacks occur. These profiles are used to detect anomalies during attacks, enabling early identification and response to power-drain DoS attacks before they can severely impact network resources.
Solution Approach 2:
The system implements feedback mechanisms by continuously monitoring power consumption of mobile devices and comparing actual values against established baselines. When deviations indicating potential attacks are detected, the system provides feedback to network elements to trigger countermeasures such as filtering malicious traffic, thereby resolving the vulnerability to DoS attacks while maintaining network stability.
2Duration of action of moving object
If mobile devices have limited power supply, then battery life is constrained under normal usage, but power-drain attacks can rapidly deplete battery capacity causing device inoperability
Solution Approach 1:
The system establishes baseline power consumption characteristics of mobile devices during normal operations before attacks occur. By pre-characterizing normal power usage patterns, the system can quickly identify abnormal power drain caused by attacks and trigger protective measures to preserve battery life.
Solution Approach 2:
The system continuously monitors power consumption and provides real-time feedback when attack-induced power drain is detected. This feedback enables rapid response actions to mitigate further battery depletion, effectively protecting the limited power supply from rapid exhaustion during attacks.
3Difficulty of detecting and measuring
If low-volume data triggers are used in attacks, then the attack traffic remains difficult to detect, but the attacks can still cause significant power consumption and resource wastage
Solution Approach 1:
The system implements continuous feedback monitoring of power consumption at mobile devices and network infrastructure elements. This approach detects attacks based on their power consumption impact rather than traffic volume, enabling identification of low-volume data trigger attacks that would otherwise be difficult to detect while still causing significant energy loss.
Solution Approach 2:
The system replaces traditional traffic-volume-based detection mechanisms with power consumption-based detection. By substituting the detection criterion from measuring data traffic volume to measuring power consumption, the system becomes sensitive to low-volume attacks that consume disproportionate power relative to their traffic size.
4Reliability
If traditional DoS countermeasures are deployed in wireless networks, then protection against wire-line attacks is improved, but the solutions are costly to deploy and impractical for wireless environments
Solution Approach 1:
The system enables wireless network elements and mobile devices to self-monitor and self-protect against power-drain attacks. By implementing autonomous power consumption monitoring and anomaly detection at the network edge and device level, the system provides effective protection without requiring costly centralized infrastructure or complex deployment architectures.
Solution Approach 2:
The system changes the monitoring parameter from traditional traffic volume to power consumption. This parameter change enables detection and protection against wireless-specific power-drain attacks using simple, low-cost measurements that do not require complex infrastructure modifications, making the solution practical for wireless network deployment.
Data Source
AI summary
In a wireless network, an architecture for wireless attack resistance (AWARE) detects power-drain denial-of-service (DoS) attacks by generating statistical measures relating the power consumption by a mobile unit and data transmitted to and from the mobile unit during normal operations of the wireless network. The AWARE architecture compares those statistical measures to current measures to detect a DoS attack if the current measure differs from the statistical measure by more than a specified threshold. If a DoS attack is detected, then the AWARE architecture can inhibit communications with the mobile unit to prevent the mobile from consuming too much power. The statistical measure may be an energy efficiency ratio relating the number of bits of data transmitted to or from the mobile unit over a specified time interval to the amount of power consumed by the mobile unit during that time interval.